Critical CVEs
3,397 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-14106 |
9.6 |
0.0034
|
28.0% | 2026-06-30 | Insufficient validation of untrusted input in Text in Google Chrome on Android prior to 15 | |
CVE-2026-14109 |
9.6 |
0.0034
|
28.0% | 2026-06-30 | Insufficient policy enforcement in Mojo in Google Chrome prior to 150.0.7871.47 allowed a | |
CVE-2026-14120 |
9.6 |
0.0034
|
28.0% | 2026-06-30 | Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed a | |
CVE-2026-14392 |
9.6 |
0.0034
|
28.0% | 2026-07-01 | Out of bounds write in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attac | |
CVE-2026-14416 |
9.6 |
0.0034
|
28.0% | 2026-07-01 | Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attack | |
CVE-2026-14417 |
9.6 |
0.0034
|
28.0% | 2026-07-01 | Use after free in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker t | |
CVE-2026-14420 |
9.6 |
0.0034
|
28.0% | 2026-07-01 | Out of bounds read and write in Dawn in Google Chrome prior to 150.0.7871.46 allowed a rem | |
CVE-2026-14424 |
9.6 |
0.0034
|
28.0% | 2026-07-01 | Use after free in Dawn in Google Chrome on Mac prior to 150.0.7871.46 allowed a remote att | |
CVE-2026-15113 |
9.6 |
0.0034
|
28.0% | 2026-07-08 | Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a r | |
CVE-2026-15773 |
9.6 |
0.0034
|
28.0% | 2026-07-14 | Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remot | |
CVE-2026-15899 |
9.6 |
0.0034
|
28.0% | 2026-07-20 | Use after free in CameraCapture in Google Chrome on Mac prior to 150.0.7871.128 allowed a | |
CVE-2026-15900 |
9.6 |
0.0034
|
28.0% | 2026-07-20 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote | |
CVE-2026-15901 |
9.6 |
0.0034
|
28.0% | 2026-07-20 | Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attack | |
CVE-2026-16424 |
9.6 |
0.0034
|
28.0% | 2026-07-21 | Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote | |
CVE-2026-17651 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 15 | |
CVE-2026-17652 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17656 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17669 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922 | |
CVE-2026-17670 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17672 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7 | |
CVE-2026-17673 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17684 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior | |
CVE-2026-17688 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17692 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed | |
CVE-2026-17708 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17710 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allow | |
CVE-2026-17713 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Android pr | |
CVE-2026-17726 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a rem | |
CVE-2026-17727 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a | |
CVE-2026-17738 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.792 | |
CVE-2026-17768 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7 | |
CVE-2026-17804 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17834 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.79 | |
CVE-2026-17837 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.792 | |
CVE-2026-17856 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 all | |
CVE-2026-17865 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allo | |
CVE-2026-17924 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker wh | |
CVE-2026-17940 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Andro | |
CVE-2026-17947 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote atta | |
CVE-2026-17991 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 a | |
CVE-2026-18002 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0. | |
CVE-2026-18015 |
9.6 |
0.0034
|
28.0% | 2026-07-30 | Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowe | |
CVE-2026-19149 |
9.6 |
0.0034
|
28.0% | 2026-08-06 | Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote | |
CVE-2026-19164 |
9.6 |
0.0034
|
28.0% | 2026-08-06 | Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922. | |
CVE-2026-19170 |
9.6 |
0.0034
|
28.0% | 2026-08-06 | Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remo | |
CVE-2026-19171 |
9.6 |
0.0034
|
28.0% | 2026-08-06 | Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remo | |
CVE-2026-19175 |
9.6 |
0.0034
|
28.0% | 2026-08-06 | Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attac | |
CVE-2026-28148 |
9.8 |
0.0034
|
27.9% | 2026-08-13 | Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions. | |
CVE-2026-25784 |
9.3 |
0.0034
|
28.1% | 2026-10-23 | Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH Bl | |
CVE-2026-46899 |
9.6 |
0.0034
|
27.9% | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Busine |